916c37831fb9a75cbe31891bb117bc77d580d292619d6938732b649b0a5b6f27 | Triage

Sharing

General

Target

NEAS.90b7d6d359138d638bbb3424e4ece5d0.exe
Size

2.6MB
Sample

231016-w4rbjshg46
MD5

90b7d6d359138d638bbb3424e4ece5d0
SHA1

f42fd295166d6a0c365b9543551f33c288aaec42
SHA256

916c37831fb9a75cbe31891bb117bc77d580d292619d6938732b649b0a5b6f27
SHA512

05c3e6b767e917515c12fde8c95f94292f883a5a488d949dc8f1bbe657e362dd6385bdf5d20deddea01979151ed8972567d7a227ca4b958971298d2b52fe6229
SSDEEP

49152:wvAjrFAwoqtSkEUP9OTUJvl51FFTbvtRwT6g8RodoRyF:frFAWtSkEUP94Yvb13tRtRomY

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  NEAS.90b7d6d359138d638bbb3424e4ece5d0.exe
- Size
  
  2.6MB
- MD5
  
  90b7d6d359138d638bbb3424e4ece5d0
- SHA1
  
  f42fd295166d6a0c365b9543551f33c288aaec42
- SHA256
  
  916c37831fb9a75cbe31891bb117bc77d580d292619d6938732b649b0a5b6f27
- SHA512
  
  05c3e6b767e917515c12fde8c95f94292f883a5a488d949dc8f1bbe657e362dd6385bdf5d20deddea01979151ed8972567d7a227ca4b958971298d2b52fe6229
- SSDEEP
  
  49152:wvAjrFAwoqtSkEUP9OTUJvl51FFTbvtRwT6g8RodoRyF:frFAWtSkEUP94Yvb13tRtRomY
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2